CVE-2026-55464 - Snipe-IT: Stored XSS via Markdown custom field

Back Back to CVE browser

MEDIUM

Snipe-IT: Stored XSS via Markdown custom field

Published Jul 10, 2026

4.8

MEDIUM

CVSS 4.0

EPSS 0.29%

Description

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, CommonMark escapes raw HTML but does not sanitize javascript: URIs in Markdown hyperlinks, allowing a user with assets.edit permission to place a malicious link in a markdown-textarea custom field that executes arbitrary JavaScript when another user opens the asset detail page and clicks the link. This issue is fixed in version 8.6.2.

Affected products

Vendor Grokability Product Snipe-IT Default
n/a
- Version
  < 8.6.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Grokability

Snipe-IT

n/a

Version	Status	Constraints
< 8.6.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

https://github.com/advisories/GHSA-r52f-r9v5-66xr
Advisory
https://github.com/grokability/snipe-it/commit/006981cccffce1739e24d3b680b676f772f40e2d
x_refsource_MISCPatch
https://github.com/grokability/snipe-it/releases/tag/v8.6.2
x_refsource_MISCRelease Notes
https://github.com/grokability/snipe-it/security/advisories/GHSA-r52f-r9v5-66xr
x_refsource_CONFIRMPatchVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-55464

Link	Providers	Tags
https://github.com/advisories/GHSA-r52f-r9v5-66xr		Advisory
https://github.com/grokability/snipe-it/commit/006981cccffce1739e24d3b680b676f772f40e2d		x_refsource_MISCPatch
https://github.com/grokability/snipe-it/releases/tag/v8.6.2		x_refsource_MISCRelease Notes
https://github.com/grokability/snipe-it/security/advisories/GHSA-r52f-r9v5-66xr		x_refsource_CONFIRMPatchVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-55464